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CLAIMS 

What is claimed is: 

1 LA system for electronic commerce transactions that provides for tracking 

2 the usage of rented digital assets over a computer network, the system comprising: 

3 a server including an asset database, the asset database to store a digital asset, a title 

4 of the digital asset, and a server usage count for the digital asset; 

5 a computing device coupled to the server over the computer network, the 

6 computing device to store a rented digital asset and an asset usage count list that includes a 

7 title of the rented digital asset and a usage count indicating the amount of usage of the 

8 rented digital asset by the computing device; 

9 wherein the server: 

10 uploads the asset usage count list from the computing device; 



U 1 1 matches the title of the rented digital asset from the asset usage count list of 

12 the computing device with the title of the digital asset in the asset database; 

ill 

13 and 

14 adds the usage count from the asset usage count list of the computing device 

15 to the server usage count for the digital asset in the asset database of the 

16 server. 

1 2. The system of claim 1, wherein the usage count of the asset usage count list 

2 of the computing device is numerically updated by one for each day the rented digital asset 

3 is used. 
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1 3. The system of claim 1 , wherein the asset usage count list of the computing 

2 device further includes a dates asset used field which includes each date the rented digital 

3 asset was used by the computing device. 

1 4. The system of claim 1 , wherein after the asset usage count list is uploaded 

2 from the computing device to the server, the asset usage count list at the computing device 

3 is cleared. 

1 5 . The system of claim 1 , wherein the digital asset is an audio digital asset. 

1 6. The system of claim 1 , wherein the server further comprises a user 

2 information database, the user information database storing a plurality of registered unique 

3 identifiers and a plurality of user keys, each user key being associated with one of the 

4 plurality of registered unique identifiers. 



1 7. The system of claim 6, further comprising a security device coupled to the 

2 computing device, the security device storing a unique identifier associated with the 

3 security device and a user key associated with the unique identifier, the server requesting 
jj3 4 the unique identifier and proof of knowledge of the user key when a computing device 

5 attempts to log on to the server in order to identify the security device, and if the security 

6 device is identified by the server, the server allows the computing device to log on to the 

7 server. 

1 8. The system of claim 7, wherein when the computing device attempts to log 

2 onto the server over the computer network, the server: 

3 requests a unique identifier from the security device; 
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4 verifies whether the unique identifier received from the security device is 

5 stored as one of the plurality of registered unique identifiers in the user 

6 information database; 

7 if the unique identifier is stored within the user information database, the 

8 server obtains the associated user key and computes a challenge and 

9 computes an expected response based on the associated user key, the server 

10 sends the challenge to the security device over the computer network; and 

1 1 if the server receives a response back from the security device in 

12 response to the challenge that matches the expected response, the 

13 server allows the computing device to log onto the server. 

1 9. The system of claim 8, wherein the expected response computed at the 

2 server and the response computed at the security device, are both based on a one-way 

3 hashing function of the user key. 

1 1 0. The system of claim 7, wherein the unique identifier and the user key are 

2 sealed in a secure memory of the security device. 

1 11. The system of claim 7, wherein the unique identifier is a serial number. 

1 12. The system of claim 7, wherein after the computing device has been 

2 allowed to log onto the server, the computing device to transmit a purchase request to rent 

3 a digital asset from the server. 

1 13. The system of claim 1 2, wherein the purchase request to rent the digital 

2 asset is automatically verified by a trusted authority, and if the trusted authority verifies the 

3 charge request, an associated charge for the rental of digital asset is automatically charged 

4 to an associated credit card. 
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1 14. The system of claim 13, wherein the rented digital asset is transmitted from 

2 the server to the computing device over the computer network. 

1 15. The system of claim 14, wherein the server encrypts the rented digital asset 

2 with an asset key and sends the encrypted rented digital asset to the computing device, the 

3 computing device storing the encrypted rented digital asset. 

1 16. The system of claim 15, wherein the server encrypts the asset key with the 

2 user key and sends the encrypted asset key to the computing device, the computing device 

3 storing the encrypted asset key. 

1 1 7. The system of claim 1 6, wherein the security device decrypts the asset key 



•\5 2 that is encrypted with the user key using the user key stored by the security device. 

1 18. The system of claim 1 7, wherein the security device transmits the decrypted 

2 asset key to the computing device such that the computing device uses the decrypted asset 

p 3 key to decrypt the rented digital asset for use. 

U 

in 1 19. A method for electronic commerce transactions that provides for tracking' 

f fj 2 the usage of a rented digital assets over a computer network, the method comprising: 

3 uploading an asset usage count list from a computing device to a server, the 

4 computing device coupled to the server over the computer network, the asset usage count 

5 list including a title of a rented digital asset and a usage count indicating the amount of 

6 usage of the rented digital asset by the computing device; 



7 matching the title of the rented digital asset from the asset usage count list of the 

8 computing device with a title of a digital asset stored in an asset database of the server, the 

9 asset database to store the digital asset, the title of the digital asset, and a server usage 
10 count for the digital asset; and 
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1 1 adding the usage count from the asset usage count list of the computing device to 

12 the server usage count for the digital asset in the asset database of the server. 

1 20. The method of claim 19, further comprising numerically updating by one 

2 the usage count of the asset usage count list of the computing device for each day the 

3 rented digital asset is used. 

1 21. The method of claim 19, wherein the asset usage count list of the computing 

2 device further includes a dates asset used field which includes each date the rented digital 

3 asset was used by the computing device. 

1 22. The method of claim 19, further comprising clearing the asset usage count 

2 list at the computing device after the asset usage count list is uploaded from the computing 

3 device to the server. 

1 23. The method claim 19, wherein the digital asset is an audio digital asset. 



L * 3 1 24. The method claim 1 9, wherein the server further comprises a user 

Mb 

2 information database, the user information database storing a plurality of registered unique 

Q 3 identifiers and a plurality of user keys, each user key being associated with one of the 

4 plurality of registered unique identifiers. 

1 25. The method claim 19, wherein a security device is coupled to the computing 

2 device, the security device storing a unique identifier associated with the security device 

3 and a user key associated with the unique identifier, the server requesting the unique 

4 identifier and proof of knowledge of the user key when a computing device attempts to log 

5 on to the server in order to identify the security device, and if the security device is 

6 identified by the server, the server allows the computing device to log on to the server. 



-104- 



003992.P005 



26. The method claim 25, wherein the unique identifier and the user key are 
sealed in a secure memory of the security device. 

27. The method claim 25, wherein the unique identifier is a serial number. 

28. The method claim 25, wherein after the computing device has been allowed 
to log onto the server, transmitting a purchase request to the server to rent a digital asset 
from the server. 

29. The method claim 28, wherein the purchase request to rent the digital asset 
is automatically verified by a trusted authority, and if the trusted authority verifies the 
charge request, an associated charge for the rental of digital asset is automatically charged 
to an associated credit card. 

30. The method of claim 29, further comprising transmitting the rented digital 
asset from the server to the computing device over the computer network. 

3 1 . The method of claim 30, further comprising: 

encrypting the rented digital asset with an asset key; 

sending the encrypted rented digital asset to the computing device; 

and 

storing the encrypted rented digital asset at the computing device. 

32. The method of claim 3 1 , further comprising: 

encrypting the asset key with the user key; 

sending the encrypted asset key to the computing device; and 
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storing the encrypted asset key at the computing device. 

33. The method of claim 32, wherein the security device decrypts the asset key 
that is encrypted with the user key using the user key stored by the security device. 

34. The method of claim 33, wherein the security device transmits the 
decrypted asset key to the computing device such that the computing device uses the 
decrypted asset key to decrypt the rented digital asset for use. 



-106- 



